GitHub stars · StarDay

1mukul975 / Anthropic-Cybersecurity-Skills817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0PythonApache-2.0 · Permissive35,700

2radareorg / radare2UNIX-like reverse engineering framework and command-line toolsetCLicense not declared25,332

3MobSF / Mobile-Security-Framework-MobSFMobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.PythonGPL-3.0 · Share derivative source22,153

4rshipp / awesome-malware-analysisDefund the Police.License not declared14,378

5ytisf / theZooA repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.PythonLicense not declared13,546

6horsicq / Detect-It-EasyProgram for determining types of files for Windows, Linux and MacOS.JavaScriptMIT · Permissive11,884

7pwndbg / pwndbgExploit Development and Reverse Engineering with GDB & LLDB Made EasyPythonMIT · Permissive11,158

8mandiant / flare-vmA collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.PowerShellApache-2.0 · Permissive9,299

9We5ter / Scanners-BoxThe Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents - A matrix of all-domain open-source network security tools for geeks, enterprises, and AI agentsLicense not declared9,181

10hugsy / gefGEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on LinuxPythonMIT · Permissive8,424

11bee-san / pyWhat🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️PythonMIT · Permissive7,342

12MISP / MISPMISP (core software) - Open Source Threat Intelligence and Sharing PlatformPHPAGPL-3.0 · Share derivative source6,648

13mandiant / capaThe FLARE team's open-source tool to identify capabilities in executable files.PythonApache-2.0 · Permissive6,302

14lief-project / LIEFLIEF - Library to Instrument Executable Formats (C++, Python, Rust)C++Apache-2.0 · Permissive5,637

15mentebinaria / retoolkitReverse Engineer's ToolkitInno SetupApache-2.0 · Permissive5,330

16charles2gan / GDA-android-reversing-ToolAuthor description: the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.PythonApache-2.0 · Permissive4,875

17intelowlproject / IntelOwlIntelOwl: manage your Threat Intelligence at scalePythonAGPL-3.0 · Share derivative source4,803

18CalebFenton / simplifyAndroid virtual machine and deobfuscatorJavaLicense not declared4,677

19A-poc / BlueTeam-ToolsTools and Techniques for Blue Team / Incident ResponseLicense not declared4,642

20pedramamini / awesome-yaraA curated list of awesome YARA rules, tools, and people.License not declared4,314